medium4.9
CVE-2020-15026
Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../ directory traversal approach for arbitrary file download via backup/plugin.php.
Impact
Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../ directory traversal approach for arbitrary file download via backup/plugin.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bludit | Bludit | Version 3.12.0 |